Advisories » MGASA-2025-0298

Updated stardict packages fix security vulnerability

Publication date: 15 Nov 2025
Modification date: 15 Nov 2025
Type: security
Affected Mageia releases : 9
CVE: CVE-2025-55014

Description

The YouDao plugin for StarDict, as used in stardict
3.0.7+git20220909+dfsg-6 in Debian trixie and elsewhere, sends an X11
selection to the dict.youdao.com and dict.cn servers via cleartext HTTP.
(CVE-2025-55014)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=34533
• https://seclists.org/oss-sec/2025/q3/75
• https://seclists.org/oss-sec/2025/q3/81
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55014

SRPMS

9/core

• stardict-3.0.6.3-2.1.mga9